GHSA-mr7q-fv7j-jcgv

GitHub Security Advisory

baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request

✓ GitHub Reviewed MODERATE Has CVE

XSS vulnerability in HTTP 400 Bad Request to baserCMS.

### Target
baserCMS 5.1.1 and earlier versions

### Vulnerability
Malicious code may be executed in HTTP 400 Bad Request.

### Countermeasures
Update to the latest version of baserCMS

Please refer to the following page to reference for more information.
https://basercms.net/security/JVN_00876083

Packagist baserproject/basercms

Affected versions: 0 (fixed in 5.1.2)

CVE-2024-46995

GHSA ID

GHSA-mr7q-fv7j-jcgv

Published

October 24, 2024 5:44 PM

Last Modified

October 24, 2024 9:45 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

baserproject/basercms

GitHub Reviewed

✓ Yes

Last updated: July 10, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.